Your privacy is our top priority. We only request access to your personal information when necessary to provide our service. We never share your personal information with third parties, except when required by law or to protect our rights. We only store personal data on our servers when essential for operating our service, and all data is transmitted, stored, and processed securely.
We take security seriously and follow industry-standard practices to protect your personal data. Our servers are securely hosted in Hetzner data centers in Falkenstein, Germany, featuring exceptional physical security. We use Transport Layer Security (TLS) for all communications between users and our servers, ensuring that all data—including chat messages—is fully encrypted in transit. TLS is widely recognized for maintaining privacy and providing a secure channel for data transmission.
This Privacy Policy applies to all use of onWebChat services — including our website, dashboard, and mobile applications (Android and iOS).
When you use our service, we store certain data about you and your visitors to enable features like visitor monitoring, live chat, and chat history. We collect technical information such as the device, IP address, browser type, and operating system used to access your website. We also track analytics, such as visit frequency and duration. This data helps us improve the security and functionality of our services; we never sell or share it with third parties. Chat messages and images are securely stored on our servers, accessible only by authorized personnel for maintenance purposes. We do not store or have access to your payment details, such as PayPal credentials or credit card information.
onWebChat will never use your account data, visitor lists, or customer information for anything other than providing our service. Your customer data is strictly confidential and will not be shared with any third parties. We will not use your customers' data (e.g., email addresses) to send promotional emails. We may occasionally email you (the onWebChat user) with important announcements or new feature updates. You can unsubscribe from these marketing emails at any time. Rarely, we may contact you directly regarding critical account issues.
We use OpenAI (OpenAI Ireland Limited / OpenAI OpCo, LLC) to provide advanced AI chatbot functionality. When users interact with our AI-powered features, their messages are processed by OpenAI's GPT models.
Bot & Fraud Protection: To protect our registration and contact forms from automated abuse, we use Google reCAPTCHA (Google Cloud Fraud Defense). This service may collect technical information such as your IP address, browser characteristics, and usage patterns to distinguish human users from bots. Data is processed by Google LLC (USA) under Standard Contractual Clauses (SCCs) and the Google Cloud Data Processing Addendum.
AI Act Compliance & Transparency: In accordance with Article 50 of the EU AI Act, we are committed to transparency. While we are rolling out visual indicators in our chat interface, please be aware that our "AI Bot" features use artificial intelligence to generate responses. These responses are predictive and should not be considered professional or factual advice.
Data Usage & Model Training: We utilize OpenAI's API (Enterprise/Business tier). Under our agreement with OpenAI, data submitted through our API is not used to train or improve OpenAI's models.
Data Retention & Safety: OpenAI may securely store API inputs and outputs for up to 30 days solely to monitor for misuse and safety violations, after which the data is permanently deleted from their systems. On our own servers (located in Germany), chat logs are stored securely according to your account settings.
International Data Transfers: As OpenAI processes data on servers that may be located outside the European Economic Area (EEA), we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure that your data receives a level of protection equivalent to that of the GDPR.
Your Rights: Under the GDPR and the EU AI Act, you have the right to access, correct, and delete your data. Furthermore, you have the right to request an explanation regarding the logic of AI-generated responses that may significantly affect you. To exercise these rights, contact us at support@onwebchat.com.
If you disagree with this privacy policy, you should stop using our service and delete your onWebChat account.
As onWebChat evolves, our privacy policy may change. We will not reduce your rights under this policy without your explicit consent. We will post any updates on this page and provide a more prominent notice for significant changes. We encourage you to review this page periodically. Your continued use of our service constitutes acceptance of any changes.
Cookies are small text files placed on your device by websites you visit. They are sent back to the server each time your browser requests a page, helping identify users as they navigate or return to a site. Cookies can store your preferences and profile information. For example, onWebChat uses cookies to remember your visitors' chat settings, such as sound preferences. On our website and dashboard, cookies save data like your language preference. If you prefer not to use cookies, you can configure your browser to reject them, though some features of our live chat service may not function properly as a result.
If you use our mobile app, the same data collection policies apply. We do not install any additional cookies through our mobile applications.
To improve our website and understand how visitors use it, we may record desktop browser sessions on our website. This includes mouse movements, clicks, scrolling behaviour, and the pages visited during a session. Session recordings are stored exclusively on our own servers, located in Germany (Hetzner data centers), and are never shared with any third party.
The data collected through session recordings may include: pages visited and the order of navigation, mouse cursor position and movement, scroll depth and direction, and anonymised interaction patterns. All form input fields are automatically masked — we never record passwords, payment details, or other sensitive input.
Session recording is carried out on the basis of our legitimate interest (Article 6(1)(f) GDPR) in improving the usability and performance of our website. Recordings are retained for a limited period and then permanently deleted. You may request deletion of your session data at any time by contacting us at support@onwebchat.com.
If you have any questions about this policy, please contact us at support@onwebchat.com.